[HamWAN PSDR] How does client authentication work?

Now taking proposals. It's turning out to be a non-trivial thing to implement in a way that's not hijackable, and only allows registered hams onto the network, while not using encryption in prohibited ways. Thoughts? --Bart